Security Dialog in Screenshot Applet

When running JIRA Attach Screenshot with latest JAVA 7 update 45, user will see a section of security message in the dialog: This application will be blocked in a future Java security update because the JAR file manifest does not contain the Permissions attribute. Please contact the Publisher for more information.

Additionally, it may display a SecurityException, causing the screenshot functionality to fail.

Steps to Reproduce:

1. Update a client machine JAVA to JAVA 7 update 45
2. Access JIRA and perform the "Attach Screenshot" operation
3. The security message will shown in the dialog:
   

Note: Only reproduce in JAVA 7 update 45 which related to the Permission Attribute added in latest update.

Resolution

This has been fixed in JIRA 6.1.7, and will also be included in JIRA 6.2.

Workaround

The following workaround is available for customers on older versions of JIRA as an interim measure until an upgrade is performed:

1. Download the attached screenshot.jar file.
2. Replace the existing file in <jira-install>/atlassian-jira/secure/applet.
3. Restart JIRA.

Important: Please make sure to test these changes in a staging/test environment before doing it in the production system.

We have internally tested the workaround against JIRA 4.4.5, 5.0.7,5.1.8,5.2.11,6.0.8, 6.1.6 and no problems observed.
Please note that under jira 4.x The screenshot applet window will not close upon attaching the issue due to a javascript error. You can close the window manually once you have checked that the screenshot has been attached successfully.